Extensive experience in enterprise architecture and technical design within complex, global organisations.Strong expertise in Identity and Access Management (IAM), including enterprise identity services and identity lifecycle capabilities.Proven understanding of authentication, authorisation, and identity federation protocols, including OIDC, OAuth 2.0, SAML, and SCIM.Demonstrated experience designing Zero Trust security architectures and defining trust boundaries.Knowledge of Agent Identity, Human Identity, and Workload Identity architectures.Experience with cloud architecture, particularly Google Cloud Platform (GCP).Strong understanding of Kubernetes, cloud-native environments, and service mesh architectures.Expertise in API architecture and security, including service-to-service and workload authentication.Experience designing event-driven architectures using messaging and asynchronous processing.Familiarity with Policy-as-Code frameworks, such as Open Policy Agent (OPA) and Cedar.Knowledge of PKI, certificate lifecycle management, and secrets management.Experience with DevSecOps practices and CI/CD integration.Proven ability to design high availability, disaster recovery, and resilient solutions that meet enterprise non-functional requirements.Strong background in security architecture, architectural governance, and design assurance.Experience producing HLDs, LLDs, architecture decision records, and technical design documentation.Demonstrated ability to assess technical risks, dependencies, and solution constraints across multiple workstreams.Strong stakeholder management skills, with the ability to collaborate across Enterprise Architecture, engineering teams, Product Owners, business stakeholders, and technology partners.Proven technical leadership experience, including mentoring engineers, guiding implementation, and promoting engineering best practices.Ability to evaluate technologies and vendor solutions, contribute to architectural roadmaps, and maintain alignment with enterprise target-state architecture.Additional Information
Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship.
HelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role-related requirements.
We appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted.
HelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law.